$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/5B6AD2DCF1C811ECBBC34549C4F9AE02.roa File: 5B6AD2DCF1C811ECBBC34549C4F9AE02.roa (raw, json) Hash identifier: rCIHZh9wUruVRZk/2Wl+iO0bQmypaGymRp+P5pHJgrc= Subject key identifier: F0:EE:46:F9:DC:DC:BA:83:AE:C0:61:0F:D4:58:A6:2B:15:D0:7A:D2 Certificate issuer: /CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Certificate serial: 02D8 Authority key identifier: 85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/5B6AD2DCF1C811ECBBC34549C4F9AE02.roa Signing time: Fri 27 Jun 2025 01:37:48 +0000 ROA not before: Fri 27 Jun 2025 01:37:48 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 16509 IP address blocks: 103.58.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF5C0, serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Validity Not Before: Jun 27 01:37:48 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=685df5ec-ceeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5f:87:e0:17:fe:77:a8:e1:f0:78:cf:0a:a1: d0:69:56:74:ad:e1:3d:02:61:80:04:dd:74:d0:38: 56:43:82:e3:86:82:a3:5c:ef:ab:47:74:6e:c8:e3: db:43:ea:04:31:ae:58:45:cf:22:bb:c0:47:ce:2c: b1:a4:24:6a:41:8a:2b:f9:11:de:7d:c0:5a:ab:52: 6b:7f:a8:c3:cf:4e:f0:14:f4:0a:0a:76:ef:9b:34: 35:5a:7c:02:b6:8b:94:84:cb:7e:0c:27:2e:42:4e: c8:5f:3a:39:c0:21:a3:af:d3:f8:df:5f:2a:19:c4: 5a:c0:8e:5a:0e:b4:b7:3d:c7:c8:74:18:cb:13:b6: 2f:8a:fc:39:d5:c9:b9:95:f8:ff:85:f4:68:33:61: 58:70:6f:13:28:ea:1e:0c:9f:c6:9b:9b:77:ca:a1: aa:ae:72:80:75:f1:ff:ff:2a:3b:73:c6:c5:ff:2c: 66:c1:c9:22:be:ef:79:20:2d:61:ed:b3:5e:8f:3b: 95:d3:e0:ab:bc:d3:be:9e:13:51:94:f4:ae:e2:b5: d7:90:3c:27:58:ad:7a:cb:f4:ea:1d:e5:8c:0b:55: 8c:b2:9a:27:a4:f5:6d:67:30:f2:ea:6b:b6:9a:10: 88:28:f7:22:2f:1a:8d:81:c4:c8:9e:35:65:41:7e: fe:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EE:46:F9:DC:DC:BA:83:AE:C0:61:0F:D4:58:A6:2B:15:D0:7A:D2 X509v3 Authority Key Identifier: keyid:85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/5B6AD2DCF1C811ECBBC34549C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.58.192.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:eb:2c:6f:23:7e:db:c2:d2:f9:72:e4:70:50:b1:db:da:4e: 48:63:4e:c3:21:e9:c9:be:31:ca:7f:e2:c2:e7:dd:6f:44:83: ac:2d:2d:6e:eb:51:eb:25:10:8f:f9:5e:5c:68:e9:03:d8:73: e0:fd:cf:3b:84:8e:16:b7:ef:c7:9f:14:2e:a9:84:84:ee:29: a8:ac:6e:74:9b:35:0b:85:7e:9b:cb:e1:86:e0:64:40:79:b2: de:fe:c4:a2:09:67:cc:4d:42:67:10:94:06:81:1b:63:00:d3: 10:5e:99:bf:93:0e:31:d6:8f:0f:da:c2:94:d9:d2:cc:f7:3b: ab:b3:07:88:37:ba:27:08:39:46:59:3d:2b:1e:38:d7:69:2d: 1b:58:7a:35:1b:1c:70:62:97:99:36:27:20:02:ba:65:b1:a1: 31:93:82:d0:bb:74:1f:7b:84:55:b8:e1:fb:84:ad:65:e2:48: 37:25:9d:43:87:20:98:50:2c:25:2b:86:1e:70:22:26:66:ac: a9:74:96:78:98:15:55:6d:3d:62:e6:45:62:ae:05:c6:26:33: e2:27:1f:74:1e:42:2a:a3:da:84:58:ed:57:11:fd:34:ae:b8: a3:ad:15:0d:ca:d6:79:1b:34:f0:53:f2:3c:bd:26:3a:c8:11: e1:71:43:b1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY1QzAxMTAvBgNVBAUTKDg1NzkzNzcyNjFDQTI3OUYxQzJGRjJFQkM0NDI5NzQz N0RENkU2OTQwHhcNMjUwNjI3MDEzNzQ4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVkZjVlYy1jZWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1+H4Bf+d6jh8HjPCqHQaVZ0reE9AmGABN100DhWQ4LjhoKjXO+rR3RuyOPb Q+oEMa5YRc8iu8BHziyxpCRqQYor+RHefcBaq1Jrf6jDz07wFPQKCnbvmzQ1WnwC touUhMt+DCcuQk7IXzo5wCGjr9P4318qGcRawI5aDrS3PcfIdBjLE7Yvivw51cm5 lfj/hfRoM2FYcG8TKOoeDJ/Gm5t3yqGqrnKAdfH//yo7c8bF/yxmwckivu95IC1h 7bNejzuV0+CrvNO+nhNRlPSu4rXXkDwnWK16y/TqHeWMC1WMsponpPVtZzDy6mu2 mhCIKPciLxqNgcTInjVlQX7+aQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPDuRvnc 3LqDrsBhD9RYpisV0HrSMB8GA1UdIwQYMBaAFIV5N3JhyiefHC/y68RCl0N91uaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjVDMC9CQ0JENEZCNkYx QzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1OGNMX0xyeEVLWFEzM1c1 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hYazNjbUhLSjU4Y0xfTHJ4RUtYUTMzVzVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkY1QzAvQkNCRDRGQjZGMUMyMTFFQ0ExNjNGRDQyQzRGOUFFMDIvNUI2QUQyRENG MUM4MTFFQ0JCQzM0NTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnOsAwDQYJKoZIhvcNAQELBQADggEBAEzrLG8jftvC0vly 5HBQsdvaTkhjTsMh6cm+Mcp/4sLn3W9Eg6wtLW7rUeslEI/5Xlxo6QPYc+D9zzuE jha378efFC6phITuKaisbnSbNQuFfpvL4YbgZEB5st7+xKIJZ8xNQmcQlAaBG2MA 0xBemb+TDjHWjw/awpTZ0sz3O6uzB4g3uicIOUZZPSseONdpLRtYejUbHHBil5k2 JyACumWxoTGTgtC7dB97hFW44fuErWXiSDclnUOHIJhQLCUrhh5wIiZmrKl0lniY FVVtPWLmRWKuBcYmM+InH3QeQiqj2oRY7VcR/TSuuKOtFQ3K1nkbNPBT8jy9JjrI EeFxQ7E= -----END CERTIFICATE-----Generated at Mon Jul 21 06:16:36 2025 by rpki-client